Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2528229s
  • max time network
    171s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    20/12/2023, 11:35

General

  • Target

    ac261441028dcedc4abc80bcc9eb3fa54bfa61ed4ccca752ea138a2a44739144.apk

  • Size

    5.0MB

  • MD5

    e41c2a78072e254905049d9504069a56

  • SHA1

    91331d87d375dd9431f0cb7c8c7e86b3e936c441

  • SHA256

    ac261441028dcedc4abc80bcc9eb3fa54bfa61ed4ccca752ea138a2a44739144

  • SHA512

    bec4a4e4e29f027ead9397f156e667a74381b7e8ab50ad43506f066fa040bd8f4c014c580f3277c67e0ecd4ab3bcfc00b99eb06e4f066661ed78c4b56886a7c0

  • SSDEEP

    98304:OOWoWeAe08MmkLOyC3VEgj+DAZbS0/xSqfmtPSBSuCF:OyJq8MnQbj+2bVp+KBS3

Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.surpax.ledflashlight.panel.hack
    1⤵
    • Acquires the wake lock
    PID:4625
  • com.surpax.ledflashlight.panel.hack:Metrica
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4673

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.surpax.ledflashlight.panel.hack/files/Mint-lastsavedfile

    Filesize

    34B

    MD5

    85881052604b83b43159e04812765092

    SHA1

    52d91c72477225323bbe79edb6e1a5c41b2484d1

    SHA256

    ecefcf0df746121a8b93579acb3231695c26e3d4b9cec88f181aebab3fd8d0b3

    SHA512

    7ffd42c3bbe8365ce45fb7773c5904d414641d9575085f645a67d1047cb641a88118f9ef566e6c10e74635abb5b7bd55131b09737d61a6cab69e49836014c0ad

  • /data/user/0/com.surpax.ledflashlight.panel.hack/files/MintSavedData-1-1703335149890.json

    Filesize

    677B

    MD5

    e699392b59559e274e4789a31c0ddff5

    SHA1

    83b63ac6bd370878ed0b6b1ea78887f2a01713c0

    SHA256

    1fb4a19d4af2f7d3af5a7c7d2ed597c66bcc1f3c2e9bd0859db0dc1329bb9bf1

    SHA512

    92d263549c9f60f3f2e0188a4035a246fd9e1454114b9181c236fa3d9addcaea835593def7e35ea58c4ecffec027291fbf0b16f89d2d8a262013b9449dce216a

  • /data/user/0/com.surpax.ledflashlight.panel.hack/files/MintSavedData-1-1703335149890.json

    Filesize

    3KB

    MD5

    2bd4c3e91c7898e3b9af37dade9c88df

    SHA1

    1fd37c64839dd63ac4316f73b85765f483e7a3b7

    SHA256

    9be001733fd258797185a9fee5862fd15e6043b78c111b91801c2e4a7f1990cb

    SHA512

    0ff3105d652170049c1ee8db0ec84b8451c4b2a3004b8567754dd9c757d8f3d8edca6b548ddc770aff1a8f78fe941f4ccd3bc91e9bc1066959e5503d1e0ec8b0

  • /data/user/0/com.surpax.ledflashlight.panel.hack/files/crashCounter

    Filesize

    2B

    MD5

    b026324c6904b2a9cb4b88d6d61c81d1

    SHA1

    e5fa44f2b31c1fb553b6021e7360d07d5d91ff5e

    SHA256

    4355a46b19d348dc2f57c046f8ef63d4538ebb936000f3c9ee954a27460dd865

    SHA512

    3abb6677af34ac57c0ca5828fd94f9d886c26ce59a8ce60ecf6778079423dccff1d6f19cb655805d56098e6d38a1a710dee59523eed7511e5a9e4b8ccb3a4686

  • /data/user/0/com.surpax.ledflashlight.panel.hack/files/lastCrashID

    Filesize

    33B

    MD5

    27ca238556c07135520c53fd03127be7

    SHA1

    0358c4ecf97448d7751759d110903a2ab19d805f

    SHA256

    17cb902a4cb896ab6ada08512deb452453ab841c78c727a1cab721ff103e7d00

    SHA512

    c12c716ee7fbb08a953297896fe8185bc249f2f6508f979cfe8edcba7be6ae325261112962d9523d8bc5bbc72cf552ff5c50ffbd71a14f9bbfac8690d17745ee

  • /data/user/0/com.surpax.ledflashlight.panel.hack/no_backup/androidx.work.workdb-wal

    Filesize

    116KB

    MD5

    2613abceacf58cac5b1f8926255c8a5e

    SHA1

    40d816b4ec5f42b53b578cc7dbf52d996d9e6604

    SHA256

    11860613069d5461ef2d883abac75bf1577e6b792aaec60013cab1795fd4073a

    SHA512

    e4712b28ba1f7af45027f9693e3573cea5a699d6ff9089e93a43b711839aeb1b30a3e0ddcb82ccc414cb2f6a3a7f9c5c5ccf335e51bde717f004338fb0891b7e

  • /data/user/0/com.surpax.ledflashlight.panel.hack/no_backup/androidx.work.workdb-wal

    Filesize

    108KB

    MD5

    2aa236e8517f53798a0e8b19b8c12ba3

    SHA1

    f4c50481961931f5d1a8659f48e769b114f08cb0

    SHA256

    bd81cdfdbf386d9801a7cde161799ec9001722cb812864482cdbefdd86c5d39b

    SHA512

    5fa62771e1556a6dc3a8c2908f48a4c86ede1f8c42e6d136bc4a11bece729269d602f35007dd9f703d684a82d18f633e29e5b83af71f54eb3be8a089f009d1dc

  • /data/user/0/com.surpax.ledflashlight.panel.hack/no_backup/androidx.work.workdb-wal

    Filesize

    197KB

    MD5

    4ea2e058afaaa5104072dc5032ab4e92

    SHA1

    8556b6860905ebc0d9d4fd9c6f999fa632be6e3f

    SHA256

    444b477563db9658e0a5a30410eca1bf8c4fe28dfeb2fd029881020d4c9a492c

    SHA512

    882c943c7d2f5ebe5a96f619318c33f9f23931f4accd40151028d6bc9c96f4bdb9aaf1d48eab62764cc24df08d45b856eae034be4d09df969ea7df3eb57b9018

  • /data/user/0/com.surpax.ledflashlight.panel.hack/no_backup/androidx.work.workdb-wal

    Filesize

    156KB

    MD5

    c5a1dd444b82fd0beb9033453bd1cbae

    SHA1

    4755b37475991b8de29f35a0e9e541cc6954b967

    SHA256

    5d5773fb7eef7350738885358cc56026d1b4e54b5ab58103aa96b21349d1431f

    SHA512

    24e99409d07fb3f36c34280aca39219b88a4693edd798111e18fe5db288957752b5458ec15a4d9ea83a8482c77c6080ee319af43e117868994ded6c086766f84

  • /data/user/0/com.surpax.ledflashlight.panel.hack/no_backup/com.google.InstanceId.properties

    Filesize

    2KB

    MD5

    83e3ed62d1ab12d68b682c56254673bc

    SHA1

    653fa7daee65f85ac04d06a8a0cb7a2337dfebee

    SHA256

    c9a3ead8d50999c0489de92a7cd11aa206be06406ab3a0cdf805f9068e27f8ca

    SHA512

    481f65153a9ad87246e08e6082ab6ca95bb87395d317e6bedfb19d2af98859d3e087b09592ee737c20b96631f53286851d51b7847ba17493568dd35e3700906d

  • /data/user/0/com.surpax.ledflashlight.panel.hack/no_backup/db_metrica_com.surpax.ledflashlight.panel.hack

    Filesize

    20KB

    MD5

    fee7442e526aa824aea67ff9cd69b389

    SHA1

    e42582ec16efe41602f4228025e5c0b2d5bed716

    SHA256

    2a859fe09536f260093b52e2314d6344c12d95727d6ea8480b12b2e099a8183c

    SHA512

    92f1ccc0dd05125df92f2c7fad1cef96134193a66e369fdffc54ac9b67276e69c1d1595e5bb05c4cb7805133b2669701c6aba6686335ea577679a86d91a4b65f

  • /data/user/0/com.surpax.ledflashlight.panel.hack/no_backup/db_metrica_com.surpax.ledflashlight.panel.hack-journal

    Filesize

    512B

    MD5

    d9e40c851203db52a3ec1942edd1c65c

    SHA1

    dca04def10b303a70d410e47e403f43c19999e7c

    SHA256

    ecf2afacc5bdffba84caa02cd29ea3ecd767fed489d2d0b677f50c7fa6144622

    SHA512

    b22241455fb87e71e4cd2b80ce06dae0273c13738470cb295b4a2f4ead35e9904bf54587c888374d161ffbb989725e6c78895a472c730d9d42bec58854268277

  • /data/user/0/com.surpax.ledflashlight.panel.hack/no_backup/db_metrica_com.surpax.ledflashlight.panel.hack-journal

    Filesize

    108KB

    MD5

    0bb34f2f3979a5a6a0506eac889b2d70

    SHA1

    032fe6e40ead3aaea0fad26562b1d2fa1df555ed

    SHA256

    a4ea258bd213bb921330b0a6890ef516deaf837399daf9f62f3176c7b523db9a

    SHA512

    6ed1cc922a818575b3a04f1bb2d065fcf41a149373ff32f3a1351a7da74f8494e720a1295e7aad0952624fd2eeea59e9d98fe12a5b5239bbb91b4417be576140

  • /data/user/0/com.surpax.ledflashlight.panel.hack/no_backup/db_metrica_com.surpax.ledflashlight.panel.hack-journal

    Filesize

    8KB

    MD5

    90940f94dd0a62f9d89e5e71088b0bef

    SHA1

    ca3730ffdecefca000a0cc34143ab56b12a3f17c

    SHA256

    16eb4b59bf04aef4fb12780dcc749bce2390b1bdb620053d326e3488dd9614d3

    SHA512

    d36e995f70cbb648be4b5b8c201a9d2fca65fa6e4c494c358f3d3910cb8504331bd7994f307a8c2627cb8f790564f0e8ab4846efbacc52d5e6529d044ede74a8

  • /data/user/0/com.surpax.ledflashlight.panel.hack/no_backup/db_metrica_com.surpax.ledflashlight.panel.hack-journal

    Filesize

    8KB

    MD5

    cb55c041a008eac84bdd8e09184979df

    SHA1

    4f0e3b99d1d5080823e4a3f8897782b9d5676185

    SHA256

    3bc5b015a67339298c4ff5456a50e61ef5d9f69ea752f4ac3f20c4c2362ce6fc

    SHA512

    b300f8beeb3a2f7579b6ad56adc30d5ee3a333f7f60cd55bf012804a02de3fa2108c6bdbe959559f15d31669dc2150de6b83709e3df680f34ea0a20cf8d03b54

  • /data/user/0/com.surpax.ledflashlight.panel.hack/no_backup/db_metrica_com.surpax.ledflashlight.panel.hack-journal

    Filesize

    12KB

    MD5

    a984703ad0ac22fcdee5c35551905ce4

    SHA1

    a6eb3ff11227152c953c09d4d65978e5c19fd515

    SHA256

    57d6e8c801262e6f0d87c162562ff88c6180007b0053fcf1a5d500ff9fe09c8c

    SHA512

    4c397dc360be6e2b14f063dd2f53816e26ecfb6bed60f448a6d1c698596802e22ddea76c7bb36b53998030f3e1e444252a6b7ecec9c02b144f14157e6be5f328

  • /data/user/0/com.surpax.ledflashlight.panel.hack/no_backup/db_metrica_com.surpax.ledflashlight.panel.hack-journal

    Filesize

    12KB

    MD5

    b440ebfccd966be85d874c2ece708727

    SHA1

    32f6929744f1b54fbc70344f2cdb76021eb74d40

    SHA256

    db34b28141c1b703b831f85df0eda02c79f9a509c75d936308e6c084dfecbc78

    SHA512

    4e846b719cd5c2df0d088b1c5e398df6a0ac2713869e11d4fd167f82ac4cec1f3535d093cb3cd4b8ad402ce0547a4e98d3e4759fb352208cf207efa5eda6fd68

  • /data/user/0/com.surpax.ledflashlight.panel.hack/no_backup/db_metrica_com.surpax.ledflashlight.panel.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal

    Filesize

    4KB

    MD5

    9f078456a2c372de631b9d49ad430670

    SHA1

    385367327622a0a6e19781dbe203b5a93ea2a6e3

    SHA256

    52c2f186617a589ba3e97a083540b55d4925025bddebce909cbc64b1b18035c0

    SHA512

    78e7b0e938471054f965971cc2f774e059afdc1e98895c76e77bf111499b0148416afc9b0b08d0845e37edbb17da86647dc056055e79afb2ab96070d21a611d0

  • /data/user/0/com.surpax.ledflashlight.panel.hack/no_backup/db_metrica_com.surpax.ledflashlight.panel.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal

    Filesize

    8KB

    MD5

    514de13561ee4106f0eb9ed9c6430a0d

    SHA1

    dd5e239cf64d4f4bc1c39b65f73cfc735cc188fb

    SHA256

    b0f205953539d81b88640a5156d09655b3391c09a2cc6fa0f6ca55a1b2a389ac

    SHA512

    edadedc84ef75503f8fe2c7435c258033fa6827e9110d385c9aa2041d5b750b74a05aea1f91c625c3eec5c4f5fc178c3e2cbe7a330064011febccbf3f5932451

  • /data/user/0/com.surpax.ledflashlight.panel.hack/no_backup/db_metrica_com.surpax.ledflashlight.panel.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal

    Filesize

    12KB

    MD5

    421b52c658e055b240ff216ee3e82c39

    SHA1

    62dcff4dd2b91fb3dd8bc9a40f788bb43e96f02d

    SHA256

    1f3802e92b83d74815e4b1d16a4014d82f7a2721ba19ebc26f305ff577174922

    SHA512

    9d5c9369fccdfcceeaa150fed6ab965b371f5247cc95f75ef5cf202c22b8856d2b1778aa15b953fdd5c94cda6d3f2f1e0065be17ebe005e83d1d4b970ae39a91

  • /data/user/0/com.surpax.ledflashlight.panel.hack/no_backup/metrica_client_data.db

    Filesize

    169KB

    MD5

    76a1b6fcec194ca5c3e5db3d261812e9

    SHA1

    b62e0bca1d3ce27bfcd4e5229b1562571c80f745

    SHA256

    c0299ca7c5a15d6a07b62192b978a438b18ea17049bf5858b33b9b0251827450

    SHA512

    c10c720f14130b80e4b80afd987af08f04665dad9bc8e7745085512ad0e871a5b7b282ee001aa1294e8e2435ad3973cfb0f53920dc3e031ccb8b2fe5edcb69c7

  • /data/user/0/com.surpax.ledflashlight.panel.hack/no_backup/metrica_client_data.db

    Filesize

    20KB

    MD5

    55569b763c4375dea604fc33d35e7e72

    SHA1

    4182c9d3ac381a734df4f47dd3fdce170e072bfb

    SHA256

    9a655ae6924ea59f56361b6eb0a15a203f66fef1fbb1c699cef1592210960001

    SHA512

    2fda031e48496979e35b32eb3d098f823221155b4b6c84c0bea94539d7df3dbf73bf30aa210e40034f0881add47d828428e003d34209f045a656fb3286d1301d

  • /data/user/0/com.surpax.ledflashlight.panel.hack/no_backup/metrica_client_data.db-journal

    Filesize

    512B

    MD5

    8fef7e72321eca84da172c17b7fa58e2

    SHA1

    c3295c17073b452eeaf1471b392354ffac933e79

    SHA256

    ff7e2f179cbe3a72d5a605c29c2e954ef6f0a44dee5183072275da3a4533a67c

    SHA512

    2bb210206ee3faa33af46d456c10ccdba7c876caa0a7996e424214455c1978464c44d6c54c8ab838f6bb0455664ab680492f92052e0995874066c2474dfc1e21

  • /data/user/0/com.surpax.ledflashlight.panel.hack/no_backup/metrica_client_data.db-journal

    Filesize

    8KB

    MD5

    5a1ecb34ead3971077cdf61459b0decd

    SHA1

    b03f8755cbf47334db9812ce3b2027eb12421bd5

    SHA256

    20e49fefa96ce50de0c06404ffb20bcc56ade1259f32ca334d11d3b643400c99

    SHA512

    568d9911b8a174fe51532ca9cf816f4570d54a72d6445135f846175338f777672386f1b683b3bfadcef33e2854e370a98e3b9d040d2085273499d3e76b845fac

  • /data/user/0/com.surpax.ledflashlight.panel.hack/no_backup/metrica_client_data.db-journal

    Filesize

    12KB

    MD5

    345cc99ca74fba9475d5d73fc36b8bef

    SHA1

    a7ecc2d6d87ba6a14bb75604fe91410ce84475e9

    SHA256

    5cfbb76628bc22b69bca4cd77347c5abf7b34d816d3ca1db0ae69a4a682e8e48

    SHA512

    1f9e237dfcd17dfa861150ee83cfc966d8e0187f5d5859192ae9181c6a3f6628c7e3d625f4934b86a06e5ed2149b7a747f3c489710b49f9aae250809c4ac11da

  • /data/user/0/com.surpax.ledflashlight.panel.hack/no_backup/metrica_data.db

    Filesize

    40KB

    MD5

    695df642aca13f0d7bc7ea8ad005a27c

    SHA1

    288880453522d60968e8e2eafd25769873ac99b2

    SHA256

    50abb09fd326ce6c624316e4527d38f1918ff6a37652320e6f9f02808106c7c9

    SHA512

    614eb832dcfb436721e82cb304e32ca497bb9784b2aad8d377493ebcd9ac3a3395ab5372df562670bbabb13562290dfa5a679b97d3d0e97a2f65dc85b0055ef2

  • /data/user/0/com.surpax.ledflashlight.panel.hack/no_backup/metrica_data.db-journal

    Filesize

    8KB

    MD5

    bf50a06d97854f22576b7edd3d55a22b

    SHA1

    416d8f57801e193734154192f53156c4a4041889

    SHA256

    9fa2a1e2aa04835df99b54c31fde24974bae48b4451fac5539eadc0e0cbb4a95

    SHA512

    b9f563b2502156046a17a49a3a225731f5b4d5bac1abd8756526806d6b90b877751be1d4a9e42ad5c7a8545f19509c6459bd40959f060a6dcdcc6d29f338005e

  • /data/user/0/com.surpax.ledflashlight.panel.hack/no_backup/metrica_data.db-journal

    Filesize

    20KB

    MD5

    74d4e00f2db139b8e581f3b94a9c5968

    SHA1

    0d4464963dea1c934271a389bbb34854417b5fa3

    SHA256

    55c7138acde29b531e1a4f67bc55bb4ea5015b52dea9874d47b22af4b334c1d6

    SHA512

    a1610cf3975cffa5cbd014f23f113fbd06e4fc4d14c18b1ba76fcfe75e280183b411eb00b4f3fc378a69f038991b8cf67e1328044ba2525d92af4e511ae00404

  • /data/user/0/com.surpax.ledflashlight.panel.hack/no_backup/metrica_data.db-journal

    Filesize

    12KB

    MD5

    57e4ddbeec498f8e5bf71961e2cf4a9c

    SHA1

    d494e249364044c205ec774c83c4fe6ae0754ca3

    SHA256

    e760ee6c81ea7b496d049094a16696b35a1e301557d43150d4814af6b731f843

    SHA512

    12ebe88903688cdd21d1dfc1d0667a95da4c86f9a9892aa1dfdd4953a381fbbaa9d62884aacea62e8a7dd08addfad3777f2d9f4214694e685621cdcda384403b

  • /data/user/0/com.surpax.ledflashlight.panel.hack/no_backup/metrica_data.db-journal

    Filesize

    12KB

    MD5

    826e33e5b3426ef4c9b57fa7feeb57ce

    SHA1

    f3b420a161d481547b54d321ea44bb553c34441f

    SHA256

    6874ea142a578678e00e725f2f189abee1c8320d24039ebf2b378b3e9b47dc0a

    SHA512

    d5d107c5666cffdc1566de3d435cc245829876de55cdf980e808d4e010f4e57e3adaa34899fc4bf18330ab3f8c37ade7e6884e42ec438bd6cfa945333d1a7f87

  • /data/user/0/com.surpax.ledflashlight.panel.hack/no_backup/metrica_data.db-journal

    Filesize

    16KB

    MD5

    1f5b9b973837161c499d2382b26c8f69

    SHA1

    4a0f05d515775c50199b0d4a70747dc5f5d04a51

    SHA256

    f7db19beae182647f7b5a65e0d0fc3128d9bd3c9b3a694e6f8c35ac4dc7bea9f

    SHA512

    f1f85ba001ed31167a189890b83b328ffa8dd3475e8651b81d385d9ab240fef6f99e211e21aab6df386ac45eea94ba928aca770725b3db930c9fb52476f0ff32

  • /data/user/0/com.surpax.ledflashlight.panel.hack/no_backup/metrica_data.db-journal

    Filesize

    32KB

    MD5

    1e9f0b463cfdf286d07333f53fac976f

    SHA1

    35c3176da45b94b81596c734c89a518bff7bfd36

    SHA256

    37a9a3537a71941ed8ce83c0b650c242436d0ef624129ec545ce182df88d87e6

    SHA512

    9164f24a359ac48bc750ac7606a9beeeb1401a7493379ae2757d16003845ef2c4dabfd8b7d05631794f2c43cf77bfebf85f2238b072a74bde1e9e840bb537755